$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa File: 2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa (raw, json) Hash identifier: fdRrThl56eZDkZPizBqa9I0ScBF8u4UAofpS2OhgLOs= Subject key identifier: 07:00:0A:02:96:06:7C:F5:F4:60:42:DA:0D:65:99:66:DB:9F:27:77 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D1F4A1F67733891C02054E740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 202 IP address blocks: 205.239.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 13 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:1f:67:73:38:91:c0:20:54:e7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=b71bfddb-7701-47f8-9ba6-6e65344be4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ad:a7:82:ab:5f:28:e3:9c:59:58:fe:5a:d6: 20:d7:dd:73:1e:fd:27:b1:b7:63:96:16:18:60:3a: 48:7e:5a:9d:6d:db:2b:5b:95:28:d0:c7:27:be:93: 91:39:74:ed:b8:9d:33:89:46:e6:5d:24:b0:eb:a1: 22:2b:a1:79:1b:05:57:04:17:dd:37:57:ba:07:23: 62:fb:89:0b:4d:14:90:45:25:73:8c:c2:a6:bb:4f: a5:88:a3:07:91:56:e5:92:79:9c:b0:09:4d:3d:11: 47:b8:26:50:d3:7d:ab:d0:92:84:0c:c2:11:65:14: 19:1a:96:49:3c:91:dd:ca:5f:4f:db:3d:0c:f7:91: 14:0f:56:cd:69:af:04:5a:2e:27:09:11:4d:62:68: 52:8c:b9:56:47:c3:2b:4a:67:02:4d:9c:2d:fa:22: 3f:69:47:0d:16:da:31:06:91:c5:bb:10:89:aa:78: f0:ff:25:77:7a:93:dd:25:91:af:b2:46:fb:b1:3f: c0:55:ec:0b:3a:52:3c:d2:b9:5f:05:6b:65:71:48: b5:4a:7a:f4:87:8a:c1:01:eb:10:db:bd:80:2e:d5: e8:41:29:6b:b3:a8:a7:db:f1:4b:4e:56:fd:5d:de: 68:a2:d0:0c:23:0d:3e:1a:63:58:60:10:eb:71:21: 6d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:00:0A:02:96:06:7C:F5:F4:60:42:DA:0D:65:99:66:DB:9F:27:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2f30cda7-b374-3fec-a284-3b3ddbafc3d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 205.239.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:e8:7a:9b:6b:f6:59:4e:a1:0a:fb:c7:34:df:d1:f0:79:85: c1:95:25:f3:bd:b9:ed:38:42:a8:e7:65:f8:27:00:ab:ee:8b: 74:0f:97:77:23:1d:be:aa:43:e4:fa:d1:9b:52:2e:33:60:d9: 09:2a:3f:35:09:0e:09:0e:2e:73:a8:81:7a:44:06:15:33:08: 66:f1:eb:49:55:aa:df:13:f3:aa:fa:3d:e3:db:ee:b6:97:db: 94:52:69:a6:20:99:b9:60:3f:95:6c:ff:e2:fb:bb:3f:a3:8b: 4f:26:be:b2:fa:42:d5:ee:6d:d3:13:4b:6a:f9:e5:2f:d3:93: bf:6e:60:67:9a:d1:04:9b:fe:6b:e9:f0:7b:53:e6:f5:68:53: b5:7d:b4:e5:46:cd:e9:94:18:56:c0:92:40:38:26:d2:f2:fc: 9b:9c:eb:25:e7:68:ce:95:0d:68:2c:ac:98:2a:96:e9:c5:39: 25:05:52:5e:98:ec:b4:75:2f:5e:e0:85:8e:17:7b:23:80:23: fa:5f:d6:be:f4:67:73:1f:9e:6f:ff:cc:1c:e8:06:ad:b0:91: fe:a9:74:5a:d8:e3:bd:0b:f3:35:e9:7f:da:dc:ea:2b:ed:1b: 4a:1a:ba:05:0e:13:85:8a:db:90:7f:8c:a9:92:22:f9:2d:c2: 43:a4:98:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSh9ncziRwCBU50AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YjcxYmZkZGItNzcwMS00N2Y4LTliYTYtNmU2NTM0NGJlNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK2ngqtfKOOcWVj+WtYg191zHv0nsbdjlhYY YDpIflqdbdsrW5Uo0McnvpOROXTtuJ0ziUbmXSSw66EiK6F5GwVXBBfdN1e6ByNi +4kLTRSQRSVzjMKmu0+liKMHkVblknmcsAlNPRFHuCZQ032r0JKEDMIRZRQZGpZJ PJHdyl9P2z0M95EUD1bNaa8EWi4nCRFNYmhSjLlWR8MrSmcCTZwt+iI/aUcNFtox BpHFuxCJqnjw/yV3epPdJZGvskb7sT/AVewLOlI80rlfBWtlcUi1Snr0h4rBAesQ 272ALtXoQSlrs6in2/FLTlb9Xd5ootAMIw0+GmNYYBDrcSFtzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcACgKWBnz19GBC2g1lmWbbnyd3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmYzMGNkYTctYjM3NC0z ZmVjLWEyODQtM2IzZGRiYWZjM2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAze9HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABXoeptr9llOoQr7xzTf0fB5hcGVJfO9ue04QqjnZfgnAKvui3QPl3cj Hb6qQ+T60ZtSLjNg2QkqPzUJDgkOLnOogXpEBhUzCGbx60lVqt8T86r6PePb7raX 25RSaaYgmblgP5Vs/+L7uz+ji08mvrL6QtXubdMTS2r55S/Tk79uYGea0QSb/mvp 8HtT5vVoU7V9tOVGzemUGFbAkkA4JtLy/Juc6yXnaM6VDWgsrJgqlunFOSUFUl6Y 7LR1L17ghY4XeyOAI/pf1r70Z3Mfnm//zBzoBq2wkf6pdFrY470L8zXpf9rc6ivt G0oaugUOE4WK25B/jKmSIvktwkOkmLo= -----END CERTIFICATE-----Generated at Wed Mar 11 20:52:04 2026 by rpki-client